Encrypted external hard drive and System Image backup in Windows 11

[kysvggbb]

I recently encrypted an external hard drive to secure my backups, but now that I am trying to create a system image backup from Windows 11, it doesn't appear to recognize the device. (The system image is unencrypted for the time being.)

See images 1 and 2 attached.

Has anyone encountered this problem before? Any workarounds?

Thanks!

[Enigma2Illusion]

https://www.veracrypt.fr/en/FAQ.html

How can I perform a Windows built-in backup on a VeraCrypt volume? The VeraCrypt volume doesn't show up in the list of available backup paths.

Windows built-in backup utility looks only for physical driver, that's why it doesn't display the VeraCrypt volume. Nevertheless, you can still backup on a VeraCrypt volume by using a trick: activate sharing on the VeraCrypt volume through Explorer interface (of course, you have to put the correct permission to avoid unauthorized access) and then choose the option "Remote shared folder" (it is not remote of course but Windows needs a network path). There you can type the path of the shared drive (for example \ServerName\sharename) and the backup will be configured correctly.

[kysvggbb]

Thanks for getting back to me!

I tried to set this up with my last backup (I saw those instructions in the manual after I posted) but had trouble implementing it. Next backup I will try again and report back.

[kysvggbb]

I have run into the same problem as before. I would love a hand getting this right in Windows 11:

1. how to activate sharing of the Veracrypt volume through Explorer
2. Where to find the option "Remote shared folder"
3. Where to find the path of the shared drive

[crbrac]

In my opinion you should consider switching to third party Backup solutions and you should have little trouble backing up to a Veracrypt container.

The built-in System Image Backup has long been deprecated in Microsoft's own words. Scroll down to System Image Backup (SIB) Solution here: https://learn.microsoft.com/en-us/windows/whats-new/deprecated-features

It's just that they don't notify us of that any time the Client is launched. Surprise! So unlike their unbridled enthusiasm for bombarding us with pleas to switch to Microsoft Edge or the Bing search bar and so on at every opportunity.

I was one of those gullible enough to persist with SIB longer than I should have. The downside of which is I was oblivious to the ability to backup to an Encrypted destination. I had assumed every Backup utility out there would fail to recognize an encrypted container as a backup destination like SIB. Only found out otherwise from someone here.

SIB is slow and rudimentary at best anyway. All the more reason to ditch.

[kysvggbb]

Thanks for your response. Windows is such a pain in the arse - agreed! Can you recommend any third party backup solutions suitable for backup to an exrnal hardrive. Open source privacy focused is preferred. What do you use?

[crbrac]

I asked the same question to a search engine. It threw up an overwhelming number of choices. I'll leave you to do the reading and make your own decision. For e.g: https://www.lifewire.com/free-backup-software-tools-2617964

Personally, I'm familiar with the all too popular Macrium Reflect, Disk Genius and Clonezilla. Although Clonezilla is open source, it is as the name suggests a cloning tool which lacks the feature of differential backups. If you are armed with any of the Linux distros, cloning is straightforward as:

sudo dd if=/dev/sda of=/dev/sdb bs=4096 conv=noerror,sync

or

sudo dd if=/dev/sda of=/tmp/sdadisk.img

Tutorial here: https://linuxopsys.com/topics/linux-dd-command-with-examples

Note: Macrium Reflect has henceforth moved onto a subscription model. The free version (8.0.7279), which is now retired but available for download, does/will continue to function until such time a future Windows update breaks compatibility.

[kysvggbb]

Thanks for getting back to me. I looked into Clonezilla, but backing up to an encrypted external hard drive didn't seem straightforward. Among that list of software you pointed to me in the direction of I found DriveImageXML. This has a free version that appears to work quite well.

https://www.runtime.org/driveimage-xml.htm

I am seriously considering learning investing the time in learning how to use Linux, though. Microsoft irritates me so much.

[Enigma2Illusion]

Note: Macrium Reflect has henceforth moved onto a subscription model.

Macrium Home has two purchase options, yearly subscription or a one-time purchase. You can see the differences between the two purchase options at the link below,

I purchased Reflect Home starting with the 5 version. The Reflect user forum is actively engaged by Macrium support and they will sometimes request you open a support ticket even if you are past your one-year of support for the one-time purchase option.

New versions are usually discounted to those that purchased the older version as one-time.

https://www.macrium.com/products/home

EDIT: Volume licenses for Home edition are coming back based on user feedback.

https://forum.macrium.com/post/72091

[crbrac]

Thank you

Was late to find out they had a change of mind.

[kysvggbb]

Thanks! I will check this out.

[crbrac]

@kysvggbb

You're running Windows 11 (so likely UEFI and Secureboot enabled). You'll very soon have to contend with this issue: KB5025885: How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932 https://support.microsoft.com/help/5025885. And, there's no opt-out, it seems.

More details here: https://www.elevenforum.com/t/additional-guidance-for-devices-using-secure-boot-to-address-cve-2023-24932.14761/

[kysvggbb]

Thanks for this, though to be honest, it's pretty technical stuff and I am not certain how it relates the problem of system image back up to an encrypted hard drive.

[crbrac]

I linked you to the issue just to alert you to any potential for mishaps if they (MS) muck up somewhere during the deployment phase via Windows Update.

Once the Revocations are in place (manually or via an update), your external installation Boot media/Backup Rescue Disks (across the board) will be rendered un-bootable from, with Secureboot enabled. You'd have to manually disable Secureboot until all your Boot media are updated with the modifications, to get back in. Ideally we'd want the updated Boot media in hand prior to the revocations being applied to the system. How they plan to do this is unclear. We aren't exactly privy to how they collaborate behind closed doors of Board rooms. That's the situation as it stands today.

Unsuspecting users completely unaware of any of this may find themselves locked out in the unlikely event of a need to boot from an incompatible Boot USB: To fix any/all issues that an installation media is capable of, install Windows/Linux etc or anything backup/restore related because the revocations have already happened via WU and they're none the wiser. Things could turn an awful lot worse if Secure boot can't be disabled (again not likely) for whatever reasons.

[kysvggbb]

Thank you for explaining this. Very clear now. I am seriously considering switching to Linux soon. Preparing for a side-by-side installation with Ubuntu to start. Perhaps I will avoid these problems that way.